Read the docs
TI-2007-05420 Aliases CVE-2007-5639GHSA-85f9-vx62-63wg

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile…

Priority LOW 35Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Medium
Impact type
—
Confidentiality · integrity · availability
None · None · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Nortel UNIStim IP Softphone 2050, IP Phone 1140E, and other Nortel IP Phone, Mobile Voice Client, and WLAN Handsets products allow remote attackers to cause a denial of service (device hang) via a flood of Mute and UnMute messages that have a spoofed source IP address for the Signaling Server.

Why it matters now

EPSS 0.0179 78th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 15

CPEVersionsRoleVendor
cpe:2.3:h:nortel:ip_audio_conference_phone_2033:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_1110:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_1120e:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_1140e:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_1150e:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_2001:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_2002:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:ip_phone_2004:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:wlan_handset_2210:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:wlan_handset_2211:*:*:*:*:*:*:*:*all versionsRunning onNortel
  • cpe:2.3:h:nortel:ip_audio_conference_phone_2033:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_1110:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_1120e:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_1140e:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_1150e:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_2001:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_2002:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:ip_phone_2004:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:wlan_handset_2210:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:wlan_handset_2211:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
Show 5 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:nortel:wlan_handset_2212:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:wlan_handset_6120:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:h:nortel:wlan_handset_6140:*:*:*:*:*:*:*:*all versionsRunning onNortel
cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:*all versionsVulnerableNortel
cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:*all versionsVulnerableNortel
  • cpe:2.3:h:nortel:wlan_handset_2212:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:wlan_handset_6120:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:h:nortel:wlan_handset_6140:*:*:*:*:*:*:*:* Versions all versions Running on ·Nortel
  • cpe:2.3:a:nortel:ip_softphone_2050:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel
  • cpe:2.3:a:nortel:mobile_voice_client_2050:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Nortel

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2007-5639
  2. 2026-10-03 Alias added: GHSA-85f9-vx62-63wg

References

Exploit 1

Patch 1

Advisory 1

  • TI-2004-01183 The Windows Animated Cursor (ANI) capability in Windows NT, Windows 2000 through SP4… CVSS 2.0MEDIUM 5.0
  • TI-2004-00776 Internet Explorer in Windows XP SP2, and other versions including 5.01 and 5.5, allows… CVSS 2.0MEDIUM 5.0
  • TI-2004-01197 The DHTML Edit Control (dhtmled.ocx) allows remote attackers to inject arbitrary web… CVSS 2.0MEDIUM 5.0
  • TI-2007-05417 Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause… CVSS 2.0HIGH 7.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences